$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f89c3cdc-34eb-38b0-9922-525110d16d32.roa File: f89c3cdc-34eb-38b0-9922-525110d16d32.roa (raw, json) Hash identifier: E9Fr2apoXtHQ1PFyHOJKFlnMg7d+8KnXZ3P+zjnW+GI= Subject key identifier: 83:7E:2C:68:E0:58:B0:CE:A9:B9:56:45:DD:2B:B0:EF:99:59:8B:4C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF2567A3A39901A53CE230880 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f89c3cdc-34eb-38b0-9922-525110d16d32.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7a:3a:39:90:1a:53:ce:23:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=482039ae-dc34-4448-ac17-bc97f81dd74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:64:ea:85:16:84:59:7c:2a:4d:53:ac:69:ac: 9b:b6:f2:9c:5c:34:5b:46:68:5a:e7:f3:88:66:aa: 16:05:f3:d7:c5:69:fe:1f:cc:0f:97:1d:05:81:98: a5:37:05:fa:ef:85:0f:23:97:94:b3:36:fb:ce:fb: 51:38:2a:b4:2d:6d:25:66:4f:1e:ce:49:2e:8f:fd: 98:7e:c3:70:b5:42:59:ab:70:7b:18:c7:25:de:59: 53:c0:c8:12:bc:d4:44:f4:31:d4:d9:19:04:92:4b: 6f:88:48:09:96:78:9e:1e:7e:fa:78:1f:42:8f:63: 55:cd:38:fd:9b:34:2e:07:68:f3:c1:54:ab:f0:0f: cf:be:5a:b1:25:55:6e:e8:62:13:25:58:05:68:45: be:a8:bf:4a:a3:d7:64:f9:91:42:f7:16:af:90:99: 34:f6:b9:07:12:49:3f:77:8c:5c:66:38:6e:47:44: 23:11:da:65:42:6a:1b:52:14:45:05:a3:71:84:26: 94:32:c0:b0:57:30:bf:e4:90:d5:c8:0c:ca:5d:06: 21:42:ad:c9:5c:7c:e6:7c:74:37:b9:e4:2d:33:93: 0d:20:2d:1f:ae:33:94:6c:7c:ff:2e:1e:64:5b:89: 49:ea:db:64:88:3a:45:dd:c0:63:45:4b:53:a6:8e: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7E:2C:68:E0:58:B0:CE:A9:B9:56:45:DD:2B:B0:EF:99:59:8B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f89c3cdc-34eb-38b0-9922-525110d16d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:97:93:22:f6:2b:f6:7b:e0:45:77:ff:ea:5b:a0:1e:57:25: c7:60:fe:fa:8f:21:53:95:c8:51:f8:88:18:70:90:96:85:cd: f5:51:b0:06:87:b5:c1:eb:d9:33:e7:e4:77:ee:c2:89:46:c2: 61:a7:ab:ed:9b:f5:90:13:25:28:fb:77:f4:72:f1:80:76:dd: 70:bb:e4:16:db:f3:0a:9f:88:9c:f5:57:68:7b:00:59:62:d6: 76:84:dc:33:40:35:d7:83:7f:9b:52:51:70:3d:80:60:cf:b0: 91:9f:0e:cb:21:dd:32:84:a7:3d:32:82:9c:f4:57:95:51:0d: 68:a8:91:34:a8:2a:1a:b5:08:32:20:d5:5f:4c:4e:93:69:d7: 18:16:1a:85:02:c7:d3:72:41:27:2c:54:06:1e:0b:fc:c0:0a: c4:1d:4c:af:11:cc:15:e9:73:78:7d:a4:76:e5:2e:c0:dd:21: 33:76:47:96:3f:c9:73:86:f8:fa:20:3e:c4:39:a6:84:70:4f: ef:15:d5:ef:c9:90:14:71:7c:aa:77:52:5d:84:1e:fc:2c:61: 39:0c:79:b4:53:14:b4:e1:a1:18:be:6d:09:62:d4:4f:d7:94: 55:c9:55:97:e1:19:39:42:43:58:9c:9d:f2:cf:26:b5:88:d7: 3c:ef:13:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVno6OZAaU84jCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NDgyMDM5YWUtZGMzNC00NDQ4LWFjMTctYmM5N2Y4MWRkNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/GTqhRaEWXwqTVOsaaybtvKcXDRbRmha5/OI ZqoWBfPXxWn+H8wPlx0FgZilNwX674UPI5eUszb7zvtROCq0LW0lZk8ezkkuj/2Y fsNwtUJZq3B7GMcl3llTwMgSvNRE9DHU2RkEkktviEgJlnieHn76eB9Cj2NVzTj9 mzQuB2jzwVSr8A/PvlqxJVVu6GITJVgFaEW+qL9Ko9dk+ZFC9xavkJk09rkHEkk/ d4xcZjhuR0QjEdplQmobUhRFBaNxhCaUMsCwVzC/5JDVyAzKXQYhQq3JXHzmfHQ3 ueQtM5MNIC0frjOUbHz/Lh5kW4lJ6ttkiDpF3cBjRUtTpo4F5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN+LGjgWLDOqblWRd0rsO+ZWYtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZjg5YzNjZGMtMzRlYi0z OGIwLTk5MjItNTI1MTEwZDE2ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSXkyL2K/Z74EV3/+pboB5XJcdg/vqPIVOVyFH4iBhwkJaFzfVRsAaH tcHr2TPn5HfuwolGwmGnq+2b9ZATJSj7d/Ry8YB23XC75Bbb8wqfiJz1V2h7AFli 1naE3DNANdeDf5tSUXA9gGDPsJGfDssh3TKEpz0ygpz0V5VRDWiokTSoKhq1CDIg 1V9MTpNp1xgWGoUCx9NyQScsVAYeC/zACsQdTK8RzBXpc3h9pHblLsDdITN2R5Y/ yXOG+PogPsQ5poRwT+8V1e/JkBRxfKp3Ul2EHvwsYTkMebRTFLThoRi+bQli1E/X lFXJVZfhGTlCQ1icnfLPJrWI1zzvEx8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:51 2025 by rpki-client